WO2018109795A1

WO2018109795A1 - Elevator, elevator control device, and program

Info

Publication number: WO2018109795A1
Application number: PCT/JP2016/086861
Authority: WO
Inventors: 幸一山下; 洋平杉山; 孝道星野
Original assignee: 株式会社日立製作所
Priority date: 2016-12-12
Filing date: 2016-12-12
Publication date: 2018-06-21
Also published as: CN109890739B; CN109890739A; JP6823080B2; JPWO2018109795A1

Abstract

An elevator according to one embodiment of the present invention is equipped with an electronic safety controller having an open-door-travel safeguard function for determining an open-door-travel abnormality and stopping the elevator car, and an operation control controller for stopping operation of the elevator car when the electronic safety controller determines an open-door-travel abnormality to be present. The electronic safety controller receives signals from a primary firefighting operation switch and a secondary firefighting operation switch, and invalidates the open-door-travel abnormality when determined that the primary firefighting operation switch and the secondary firefighting operation switch have been activated.

Description

Elevator, elevator control device and program

The present invention relates to an elevator equipped with a door-opening travel protection device, an elevator control device, and a program, and more particularly to a fire-fighting driving technique capable of operating even when the door is open.

Conventionally, elevators are provided with various safety devices to ensure the safety of the car. The safety device has a function of shifting the car to a safe state, for example, detecting an abnormality of the car by the detection device and making an emergency stop. The detection device includes a final limit switch, governor, and car that detect that the car is operating within the specified speed and within the specified range of the hoistway. There are a rotary encoder for detecting speed and position, a car position sensor, a door switch installed on a car door and a landing door, and the like.

In recent years, electronic safety systems using electronic safety controllers that electronically control the above safety devices have begun to be adopted. In the electronic safety system, the function of the safety device is realized by software, so that it is not necessary to install a mechanical final limit switch or a governor (governor device).

By the way, according to the provisions of the Building Standards Act, it is obliged to install a door opening travel protection device (UCMP: Unintended Car Movement Protection). The door-opening travel protection device is a safety device that automatically stops the car when the drive device or controller fails and the car goes up and down before all doors of the car and hoistway are closed. It is. By importing the car door switch and landing door switch input signals and the car position sensor input signals into the electronic safety controller, the electronic safety controller can also function as a door-open travel protection device. .

Patent Document 1 discloses a technique for detecting a floor reference position, a speed of a car, and a movement amount in an elevator system including a safety controller, and setting a car speed abnormality determination threshold value for the car position. Has been. As a result, door opening traveling can be detected at an earlier point in time than what is determined to be door opening traveling abnormality only by the car position, and safety can be further improved, and erroneous detection can be eliminated to prevent a decrease in operation efficiency. .

JP 2014-139106 A

Based on the provisions of the Building Standard Law, it is obliged to install emergency elevators for buildings that are over 31m in height. Emergency elevators are used by the fire brigade for fire fighting and rescue operations in the event of a fire. The emergency elevator can be used as a normal elevator during normal times, but is designed based on a specification different from that of a normal elevator. For example, in an emergency elevator, when the primary fire fighting operation switch is turned on in an emergency, the primary fire fighting operation is switched to the operating state, and when the primary fire fighting operation is impossible due to a door failure, etc., the secondary fire fighting operation switch There is a secondary fire-fighting function that shifts to the driving state when is turned on.

With the technique described in Patent Document 1, it is possible to prevent the door from running with a safety system. However, in the secondary fire-fighting operation of the emergency elevator, even if the door or the door switch breaks down and the door cannot be closed, the function that enables the operation of the elevator cannot be satisfied.

From the above situation, the purpose is to realize secondary fire-fighting operation in an elevator that performs door-open running abnormality determination using an electronic safety controller.

The elevator according to one aspect of the present invention includes a signal generator that generates a signal in conjunction with a car in the hoistway, and a detection member that is provided on the car and that is installed corresponding to the floor in the hoistway. A car position sensor that detects the open / closed state of the landing door, a car door switch that detects the open / closed state of the car door, and a primary fire-fighting operation installed in the car The primary fire fighting operation switch, the secondary fire fighting operation switch for performing the secondary fire fighting operation when the primary fire fighting operation switch is not shifted to after the operation, the output signal of the signal generator, the car Electricity having a door-opening travel protection function that determines door-opening abnormality and stops the operation of the car from the position sensor output signal, the landing door switch signal, and the car door switch signal. Comprising a safety controller, in the case where the electronic safety controller has determined that the running with door open abnormality, the operation controller for stopping the operation of the car, the. When the electronic safety controller takes in the signals of the primary fire fighting operation switch and the secondary fire fighting operation switch, and determines that the primary fire fighting operation switch and the secondary fire fighting operation switch are turned on, the electronic safety controller determines the door opening running abnormality. Disable it.

According to at least one aspect of the present invention, the signals of the primary fire-fighting operation switch and the secondary fire-fighting operation switch are taken into the electronic safety controller, and the door-open running abnormality determination is invalidated. Thereby, it becomes possible to implement | achieve secondary fire-fighting driving | operation in the elevator which performs a door open travel abnormality determination using an electronic safety controller.
Problems, configurations, and effects other than those described above will be clarified by the following description of embodiments.

It is explanatory drawing which shows the whole structure of the elevator to which the electronic safety system based on one Embodiment of this invention was applied. It is a block diagram which shows the hardware constitutions of the electronic safety controller with which the elevator of FIG. 1 is equipped, and an operation control controller. It is a block diagram which shows the function structure of the electronic safety controller with which the elevator of FIG. 1 is equipped, and an operation control controller. It is a flowchart which shows the operation example of the electronic safety controller which concerns on one Embodiment of this invention. It is a flowchart which shows the operation example (1) of the operation control controller which concerns on one Embodiment of this invention. It is a flowchart which shows the operation example (2) of the operation control controller which concerns on one Embodiment of this invention. It is a flowchart which shows operation | movement of the operation control controller (car control part) at the time of the secondary fire fighting operation which concerns on one Embodiment of this invention.

Hereinafter, exemplary embodiments for carrying out the present invention will be described with reference to the accompanying drawings. In the drawings, components having substantially the same function or configuration are denoted by the same reference numerals and redundant description is omitted.

<One Embodiment>
[Elevator structure]
FIG. 1 is an explanatory diagram illustrating an overall configuration of an elevator to which an electronic safety system is applied according to an embodiment of the present invention. Although the structure of the elevator 1 shown in FIG. 1 is general, the elevator to which the present invention is applied is not limited to this example. Hereinafter, the structure of the elevator 1 will be briefly described.

In the elevator 1, a car 10 and a counterweight 12 are connected by a main rope 11, and the car 10 moves up and down in conjunction with rotation of a sheave 13 that is driven to rotate by a motor 14. When the car 10 is stopped (operation is stopped), the sheave 13 is fixed by a brake (not shown) (for example, a doubled structure). The brake is also used for emergency stop of the car 10 when the elevator is abnormal.

The elevator 1 includes a control panel 20 (an example of an elevator control device) that controls the operation of the elevator 1 above a hoistway (building) in which the car 10 moves. The car 10 is controlled by an operation controller 21 installed in the control panel 20 to detect registration of a destination floor button in the landing and registration of a destination floor button in the car 10 and travel to the destination floor. . In addition, in FIG. 1, although the control board 20 is installed above the hoistway, it is not limited to this example.

On the other hand, an electronic safety controller 22 mounted with a microcontroller (hereinafter referred to as “microcomputer”) having a safety device function is installed in the control panel 20. The electronic safety controller 22 determines the normal / abnormal state of the elevator 1 and performs processing for shifting the car 10 to a safe state when it is determined as abnormal. For example, the electronic safety controller 22 cuts off the main power supply (for example, the motor drive circuit 15 (see FIG. 3)) that supplies power to the motor 14 and simultaneously activates the brake to perform emergency stop of the car 10. . The electronic safety controller 22 has a configuration independent of the operation control controller 21 that performs basic control of the elevator 1.

The elevator 1 is provided with a governor device 30 and an encoder 33 (an example of a signal generator) as one of the sensors for detecting an abnormality of the elevator 1. A rotary encoder is used as the encoder 33. The encoder 33 is attached to a governor pulley 31 around which a speed adjusting rope 32 is wound. The governing rope 32 is connected to the car 10, and the governor pulley 31 rotates as the governing rope 32 moves in conjunction with the traveling of the car 10. The encoder 33 provided in the governor pulley 31 rotates in conjunction with the car 10 and generates a pulse corresponding to the rotation.

The signal of the encoder 33 is input to the electronic safety controller 22, and the speed and movement amount of the car 10 are calculated by counting the number of pulses per predetermined time. Although the encoder 33 is attached to the governor pulley 31 in FIG. 1, it is not limited to this example. For example, the encoder 33 may be attached to the sheave 13 or the motor 14. Car speed and amount of movement can be detected by reading code information magnetically recorded by sticking a magnetic tape vertically (in the up-and-down direction) in the hoistway (eg rail) or optically (eg barcode) It may be a signal generator.

The electronic safety controller 22 also includes a car provided on the upper portion of the car 10 that detects

detection plates

40a and 40b (an example of detection members) for detecting floors installed corresponding to the floors of the hoistway. An output signal of the position sensor 41 (an example of a detection device) is captured. The position of the car 10 in the hoistway (the floor reference position of each floor and the floor position information (for example, the first floor, the second floor, etc.) of each floor) is detected by a car position sensor 41 (for example, the floor 10). This is performed using a reflective photoelectric sensor) and

detection plates

40a and 40b attached to the landing thresholds on each floor. In the following description, when the

detection plates

40a and 40b are not distinguished, they are referred to as “detection plate 40”.

When the car position sensor 41 is in a position facing the detection plate 40, the reflected light of the sensor is detected from the detection plate 40. By changing the length and shape of each detection plate for each floor, it is detected that the car 10 is at a predetermined reference position on that floor. In order to accurately detect the reference position, the edge of the detection plate may be detected by a step-like change in the sensor signal. Based on the detected floor reference position and the calculated movement amount, a landing reference position (landing level) for the car 2 to land is calculated. Instead of detecting the reflecting plate, other detection members such as a bar code provided in the hoistway may be detected optically or by other methods.

Then, the electronic safety controller 22 determines whether or not the car 10 is in a door opening permission zone in which opening of each door is permitted based on the output signal of the encoder 33 and the output signal of the car position sensor 41. .

The landing door switches 50a and 50B provided at the landings on each floor are provided with landing door switches 51a and 51b for detecting the open / closed state of the

landing doors

50A and 50B. Similarly, the car 10 is provided with a car door switch 61 for detecting the open / closed state of the car door 60. Signals from the landing door switches 51a and 51b and the car door switch 61 on each floor are input to both the operation control controller 21 and the electronic safety controller 22, respectively. In the following description, when the

landing doors

50A and 50B are not distinguished from each other, they are referred to as “landing doors 50”, and when the landing door switches 51a and 51b are not distinguished from each other, they are referred to as “landing door switches 51”.

The car 10 is provided with an operation panel 70 equipped with a destination floor button and the like. The operation panel 70 is provided with a primary fire fighting operation switch 71 and a secondary fire fighting operation switch 72 necessary for fire fighting operation in the event of a fire. Signals from the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 are input to both the operation control controller 21 and the electronic safety controller 22, respectively. In the present embodiment, the secondary safety operation is realized by the cooperation of the electronic safety controller 22 and the operation control controller 21.

The electronic safety controller 22 detects the position of the car 10 (hereinafter referred to as “car position”) based on signals output from the encoder 33 and the car position sensor 41. In addition, the electronic safety controller 22 performs a door opening / running abnormality determination process by detecting the open / closed state of the car door from the signals output from the landing door switches 51a and 51b and the car door switch 61.

However, when a fire occurs in the elevator 1, it is necessary to cause the car 10 to travel regardless of the door opening / closing state in the secondary fire-fighting operation. In addition, since the operation controller 21 cannot permit the traveling of the car 10 when the door is open, the signals of the landing door switches 51a and 51b and the car door switch 61 are forcibly short-circuited during the secondary fire fighting operation ( The door is closed). FIG. 3 shows the invalidation process of the door opening running abnormality determination and the process of short-circuiting the signals of the door switches.

[Hardware configuration of electronic safety controller and operation controller]
Next, the hardware configuration of the electronic safety controller 22 and the operation control controller 21 will be described.

FIG. 2 is a block diagram showing the hardware configuration of the electronic safety controller 22 and the operation control controller 21. Here, the hardware configuration of the computer 80 included in each of the electronic safety controller 22 and the operation control controller 21 will be described. It should be noted that each part of the computer 80 is selected according to the function and purpose of use of each controller.

The computer 80 includes a CPU (Central Processing Unit) 81, a ROM (Read Only Memory) 82, and a RAM (Random Access Memory) 83 respectively connected to the bus 84. Further, the computer 80 includes a display unit 85, an operation unit 86, a nonvolatile storage 87, and a network interface 88.

CPU81 reads the program code of the software which implement | achieves each function which concerns on this embodiment from ROM82, and performs it. In the RAM 83, variables, parameters and the like generated during the arithmetic processing are temporarily written.

The computer 80 included in each of the electronic safety controller 22 and the operation control controller 21 includes a CPU, a microcomputer, an arithmetic processing device including a DSP, an electronic processing device that can implement processing logic by programming an FPGA (logic circuit), and the like. Consists of.

The display unit 85 is, for example, a liquid crystal display monitor, and displays a result of processing performed by the computer 80 and the like. For example, a keyboard, a mouse, a touch panel, or the like is used for the operation unit 86, and a user can perform predetermined operation inputs and instructions.

Nonvolatile storage 87 includes, for example, HDD (Hard Disk Drive), SSD (Solid State Drive), flexible disk, optical disk, magneto-optical disk, CD-ROM, CD-R, magnetic tape, nonvolatile memory card, and the like. Used. The nonvolatile storage 87 may store a program for causing the computer 80 to function in addition to the OS (Operating System) and various parameters.

As the network interface 88, for example, a NIC (Network Interface Card) or the like is used, and various types of data can be transmitted and received between devices via a network N such as a LAN. The operation controller 21 and the electronic safety controller 22 may be connected by a dedicated line or other lines.

[Functional configuration of electronic safety controller and operation controller]
FIG. 3 is a block diagram showing functional configurations of the electronic safety controller 22 and the operation control controller 21 provided in the control panel 20. For example, the function of each part of the electronic safety controller 22 and the operation control controller 21 is realized by the CPU 81 of each controller executing a program recorded in the ROM 82 or the like.

The electronic safety controller 22 determines door opening running abnormality and outputs the determination result to the operation controller 21. The operation controller 21 controls the driving of the car 10, that is, the operation of the elevator 1 by controlling the motor drive circuit 15 that drives the motor 14. When the operation control controller 21 receives the determination result of the door opening travel abnormality from the electronic safety controller 22, the operation control controller 21 immediately controls to stop the traveling of the car 10.

The input signals of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 installed in the car 10 are double input to the electronic safety controller 22 and the operation control controller 21 in consideration of reliability.

(Electronic safety controller 22)
The electronic safety controller 22 includes input interfaces 221a to 221d, RAMs 222a to 222d (first primary memory) as primary memories, and RAMs 223a to 223d (first secondary memories) as secondary memories. Further, the electronic safety controller 22 includes a UCMP invalid signal generation unit 224, a door-open travel protection device 225 (“UCMP” in the figure), a switch 225a, a mutual check unit 226, and a safety circuit cutoff signal generation unit 227.

The input interfaces 221a to 221d are interfaces to which signals of external physical switches (hereinafter also referred to as “hardware switches”) are input. In the present embodiment, the assigned primary fire fighting operation switch 71 or secondary fire fighting operation switch 72 signal is input to each of the four input interfaces 221a to 221d. The input interfaces 221a to 221d convert the received signals of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 into signals representing the states of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72, respectively.

For example, when a signal from the primary fire fighting operation switch 71 or the secondary fire fighting operation switch 72 is input, the input interfaces 221a to 221d generate 32-bit data with all bits being “1” as being in the on state. To do. On the other hand, when the signal from the primary fire fighting operation switch 71 or the secondary fire fighting operation switch 72 is not input, the input interfaces 221a to 221d generate 32-bit data in which all bits are “0” as being in the off state. To do.

In addition to the input interfaces 221a to 221d, the electronic safety controller 22 has an input interface that captures each signal input to the electronic safety controller 22, but illustration thereof is omitted.

RAMs 222a to 222d are provided in one-to-one correspondence with the input interfaces 221a to 221d, respectively, and hold data input from the input interfaces 221a to 221d. In the figure, RAMs 222a to 222d are referred to as RAM1 to RAM4. The RAM1 to RAM4 hold data (for example, 32 bits) output from the input interfaces 221a to 221d. The example shown in FIG. 3 is an example when the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 are operated (ON state), and RAM1 to RAM4 are “FFFFFFFF” expressed in hexadecimal numbers. Holds data.

The RAMs 223a to 223d are provided in one-to-one correspondence with the RAMs 222a to 222d (RAM1 to RAM4), respectively, and hold the data output from the RAM1 to RAM4. In the figure, RAMs 223a to 223d are described as RAM1 'to RAM4'. The RAM 1 ′ to RAM 4 ′ hold the bit expanded data of the RAM 1 to RAM 4.

For example, the data “FFFFFFFF” in the RAM 1 to RAM 4 is converted into “A5A55A5A” as an example by the CPU 81 included in the electronic safety controller 22 and held in the RAM 1 ′ to RAM 4 ′. This is for measures against data corruption (also referred to as RAM corruption) described later. Of course, the bit expansion is not limited to this example.

The door-opening travel protection device 225 (UCMP) determines the door-opening travel abnormality from the output signal of the encoder 33, the output signal of the car position sensor 41, the signal of the landing door switch 51, and the signal of the car door switch 61. It is a microcomputer having a door-opening travel protection function for stopping the car 10. The door-open travel protection device 225 outputs the determination result of the door-open travel abnormality to the car control unit 215 of the operation control controller 21.

The door-opening travel protection device 225 counts the number of pulses per predetermined time included in the encoder signal of the encoder 33 and detects the speed and position (movement amount) of the car 10. Further, the door-opening travel protection device 225 detects the floor reference position of each floor based on the detection result of the detection plate 40 for floor detection output from the car position sensor 41. In the present embodiment, the floor reference position is detected based on the detection results of the

detection plates

40a and 40b by the car position sensor 41. However, the structure for detecting the floor reference position is not limited to this example.

The UCMP invalid signal generation unit 224 (door open travel abnormality determination invalid signal generation unit) stores data (a signal indicating the state of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72) held in each of the RAM 1 'to RAM 4'. ), The state of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 is determined. When the UCMP invalid signal generation unit 224 determines that the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 are turned on, the UCMP invalid signal generation unit 224 generates a door opening travel abnormality determination invalid signal and determines the door opening travel abnormality. Disable.

In the example shown in FIG. 3, as a method of invalidating the determination of the door opening travel abnormality, a switch 225 a provided between the UCMP invalid signal generation unit 224 and the car control unit 215 is set by a door opening traveling abnormality determination invalid signal. Open. Thereby, the signal (door-opening abnormality determination result) output from the door-opening travel protection device 225 to the car control unit 215 is blocked. In addition, since it is not necessary to input the door opening running abnormality determination result to the car control unit 215, the present invention is not limited to this example. For example, a method of invalidating the function of determining the door opening travel abnormality of the door opening travel protection device 225, a method of temporarily stopping the operation of the door opening travel protection device 225, and the like are also conceivable.

The UCMP invalid signal generation unit 224 compares four signals (on signals) that are bit-developed from the on / off signals and held in the RAM 1 ′ to RAM 4 ′ as a countermeasure against data corruption, and when the four signals match. Only it is desirable to invalidate the door open running abnormality determination. As a result, data corruption (also referred to as “RAM corruption”) of the signal data captured by the input interfaces 221a to 221d can be prevented.

The mutual check unit 226 continuously performs a process of reading and comparing the signals of the primary fire fighting operation switch 71 that are double-captured in the electronic safety controller 22 from the RAM 1 ′ and the RAM 2 ′. In addition, the mutual check unit 226 continuously performs processing of reading out and comparing the signals of the secondary fire fighting operation switch 72 that are double-captured into the electronic safety controller 22 from the RAM 3 ′ and the RAM 4 ′. When the contents of the signals of the two primary fire fighting operation switches 71 or the signals of the two secondary fire fighting operation switches 72 do not match (in an abnormal state), the mutual check unit 226 generates a safety circuit cutoff signal. A check result indicating abnormality is output to the generation unit 227.

The safety circuit cutoff signal generation unit 227 receives the check result of the mutual check unit 226, generates a safety circuit cutoff signal, and outputs the safety circuit cutoff signal to the car control unit 215 of the operation controller 21. Then, the car control unit 215 that has received the safety circuit cutoff signal performs control to stop the elevator 1, that is, stop the operation of the car 10.

The safety circuit is a circuit provided in the car control unit 215, and is a circuit that controls the motor drive circuit 15 including a power conversion circuit and the like. When the car control unit 215 receives the safety circuit cutoff signal, the car control unit 215 performs control to stop the operation of the elevator 1. For example, the control signal output from the safety circuit (the car control unit 215) is cut off, or the main power supplied to the motor drive circuit 15 is cut off. Thereby, a drive signal (power supply) is not supplied from the motor drive circuit 15 to the motor 14, and the elevator 1 is stopped (the car 10 is stopped).

(Operation controller 21)
The operation controller 21 includes input interfaces 211a to 211d, RAMs 212e to 212h (secondary primary memory) as primary memories, and RAMs 213e to 213h (secondary secondary memories) as secondary memories. The operation control controller 21 includes a door switch short-circuit signal generation unit 214, a car control unit 215, a mutual check unit 216, and a safety circuit cutoff signal generation unit 217. In the figure, RAMs 212e to 212h are described as RAM5 to RAM8, and RAMs 213e to 213h are described as RAM5 ′ to RAM8 ′.

The input interfaces 211a to 211d, the RAMs 212a to 212d, and the RAMs 213a to 213d correspond to the input interfaces 221a to 221d, the RAMs 222a to 222d, and the RAMs 223a to 223d, respectively, and have the same functions.

The door switch short-circuit signal generation unit 214 uses the primary fire fighting operation switch 71 and the data stored in each of the RAMs 5 ′ to 8 ′ (signals indicating the states of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72). The state of the secondary fire fighting operation switch 72 is determined. When the door switch short circuit signal generation unit 214 determines that the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 are turned on, the door switch short circuit signal generation unit 214 generates a landing door switch short circuit signal and a car door switch short circuit signal. The door switch short circuit signal and the car door switch short circuit signal are output to the car control unit 215.

The door switch short-circuit signal generation unit 214 also compares four signals (on signal) that are bit-developed from the on / off signal and held in the RAM 1 ′ to RAM 4 ′ to prevent data corruption, and the four signals match. Only when is it desirable to generate a landing door switch short circuit signal and a car door switch short circuit signal. As a result, it is possible to prevent garbled data of the signals captured by the input interfaces 211e to 211h.

The car control unit 215 performs processing for controlling the traveling of the car. When the car control unit 215 receives the landing door switch short-circuit signal and the car door switch short-circuit signal, the car control unit 215 performs control to stop the elevator 1, that is, stop the operation of the car 10.

The mutual check unit 216 takes in signals representing the states of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 from the RAM 1 to RAM 4 of the electronic safety controller 22. Further, the mutual check unit 216 takes in signals representing the states of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 from the RAMs 5 to 8. The mutual check unit 216 receives each signal indicating the state of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 received from the electronic safety controller 22 and the primary fire fighting captured from the RAM 5 to RAM 8 of the operation control controller 21. The signals representing the states of the operation switch 71 and the secondary fire fighting operation switch 72 are compared, and if the contents of the signals do not match, control for stopping the operation of the car 10 is performed.

In addition, the mutual check unit 216 continuously performs a process of reading and comparing the signals of the primary fire fighting operation switch 71 that are double-captured into the operation controller 21 from the RAM 5 ′ and the RAM 6 ′. In addition, the mutual check unit 216 continuously performs a process of reading and comparing the signals of the secondary fire fighting operation switch 72 that are double-captured into the operation controller 21 from the RAM 7 ′ and the RAM 8 ′. When the contents of the signals of the two primary fire fighting operation switches 71 or the signals of the two secondary fire fighting operation switches 72 do not match (in an abnormal state), the mutual check unit 216 outputs a safety circuit cutoff signal. A check result indicating abnormality is output to the generation unit 217.

The safety circuit cutoff signal generation unit 217 receives the check result of the mutual check unit 216, generates a safety circuit cutoff signal, and outputs the safety circuit cutoff signal to the car control unit 215. Then, the car control unit 215 that has received the safety circuit cutoff signal performs control to stop the elevator 1, that is, stop the operation of the car 10.

[Operation of electronic safety controller]
FIG. 4 is a flowchart showing an operation example of the electronic safety controller 22 (UCMP invalid signal generation unit 224). The CPU 81 included in the electronic safety controller 22 executes the program recorded in the ROM 82 or the like, whereby the processing shown in FIG. 4 is executed.

First, the UCMP invalid signal generation unit 224 of the electronic safety controller 22 determines whether or not the primary fire fighting operation switch 71 is in an ON state based on the data held in the RAM 1 ′ and the RAM 2 ′ (S1).

Next, when the primary fire fighting operation switch 71 is in the ON state (YES in S1), the UCMP invalid signal generation unit 224 determines the secondary fire fighting operation switch based on the data held in the RAM 3 ′ and the RAM 4 ′. It is determined whether 72 is in an ON state (S2).

When the secondary fire fighting operation switch 72 is in the on state (YES in S2), the UCMP invalid signal generation unit 224 determines whether or not the data of all signals in the RAM 1 ′ to RAM 4 ′ match. (S3).

Here, when the data of all signals in RAM 1 ′ to RAM 4 ′ match (YES in S3), the UCMP invalid signal generation unit 224 invalidates the door opening traveling abnormality determination of the door opening traveling protection device 225. Processing is performed (S4).

When the primary fire fighting operation switch 71 is in an off state (NO in S1), when the secondary fire fighting operation switch 72 is in an off state (NO in S2), when all data in the RAM 1 ′ to RAM 4 ′ do not match ( If NO in S3) or the process in step S4 ends, the UCMP invalid signal generation unit 224 ends the process of this flowchart.

As described above, in this embodiment, in parallel with the processing of steps S1 to S4, the mutual check unit 226 compares the data of RAM1 ′ and RAM2 ′, and RAM3 ′ and RAM4 ′, and the data does not match. Is output to the safety circuit cutoff signal generator 227. Receiving the abnormality result, the safety circuit cutoff signal generation unit 227 outputs a safety circuit cutoff signal to the car control unit 215 of the operation control controller 21. Then, the car control unit 215 performs control to stop the operation of the elevator 1.

[Operation of operation controller]
FIG. 5 is a flowchart showing an operation example (1) of the operation control controller 21 (door switch short-circuit signal generation unit 214). This flowchart shows a door switch short-circuit signal generation process. The CPU 81 included in the operation control controller 21 executes the program recorded in the ROM 82 or the like, whereby the process shown in FIG. 5 is executed.

First, when the emergency call back operation button 55 is operated by an operator such as a firefighter, the operation controller 21 detects that the emergency call back operation button 55 is turned on (S11). The operator can get into the called car 10 and operate the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72. Even when an emergency call back operation switch attached to a management panel installed in a manager's room or the like is operated instead of the emergency call back operation button 55, the process of step S11 is similarly performed. Note that the process of step S11 can be omitted.

Next, the door switch short circuit signal generation unit 214 of the operation controller 21 determines whether or not the primary fire fighting operation switch 71 is on based on the data held in the RAM 5 ′ and RAM 6 ′ (S12). ). When the secondary fire fighting operation switch 72 is not in the ON state (NO in S12), the door switch short circuit signal generation unit 214 continues the determination process of the state of the secondary fire fighting operation switch 72.

Next, when the primary fire fighting operation switch 71 is in the ON state (YES in S12), the door switch short circuit signal generator 214 determines whether or not the primary fire fighting operation is impossible (S13). When the primary fire fighting operation is not possible (YES in S13), the door switch short circuit signal generation unit 214 indicates that the secondary fire fighting operation switch 72 is on based on the data held in the RAM 7 ′ and RAM 8 ′. It is determined whether or not (S14). When the secondary fire fighting operation switch 72 is in the off state (NO in S14), the door switch short circuit signal generation unit 214 continues the state determination process of the secondary fire fighting operation switch 72.

If the secondary fire fighting operation switch 72 is on (YES in S14), the door switch short-circuit signal generation unit 214 determines whether or not the data of all signals in the RAM 5 ′ to RAM 8 ′ match. (S15).

Here, when the data of all the signals in the RAM 5 ′ to RAM 8 ′ match (YES in S15), the UCMP invalid signal generation unit 224 causes the short circuit signal of the landing door switch 51 and the short circuit signal of the car door switch 61. Is generated (S16). Then, the door switch short circuit signal generation unit 214 outputs a short circuit signal of each door switch to the car control unit 215 (S17).

When the primary fire fighting operation is possible (NO in S13), when the data of all signals in the RAM 5 'to RAM 8' do not match (NO in S15), or when the processing in step S17 is completed, the processing of this flowchart is performed. finish.

FIG. 6 is a flowchart showing an operation example (2) of the operation controller 21 (mutual check unit 216, safety circuit cutoff signal generation unit 217). This flowchart shows a process for generating a safety circuit cutoff signal.

First, the mutual check unit 216 receives the signal of the primary fire fighting operation switch 71 and the signal of the secondary fire fighting operation switch 72 from the electronic safety controller 22 (S21).

Next, the mutual check unit 216 receives the data of the signals of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 received from the electronic safety controller 22, and the primary fire fighting operation switches 71 and secondary captured directly from the hard switch. The data of the signal of the fire fighting operation switch 72 is compared (S22).

Next, the mutual check unit 216 determines whether the contents of these four signals match (S23). If the contents of the four signals match (YES in S23), the mutual check unit 216 ends the process of this flowchart.

On the other hand, when the contents of the four signals do not match (NO in S23), the door switch short circuit signal generation unit 214 generates a safety circuit cutoff signal (S24), and sends the safety circuit cutoff signal to the car control unit 215. Output (S25). Then, the car control unit 215 performs control to stop the operation of the elevator 1 by cutting off the power supplied to the motor drive circuit 15 or the like. The operation controller 21 ends the process of this flowchart after the process of step S25 ends.

As described above, in the present embodiment, in parallel with the processing of steps S21 to S25, the mutual check unit 216 compares the data of the RAM 5 ′ and RAM 6 ′, and the RAM 7 ′ and RAM 8 ′, and the data does not match. The abnormal result is output to the safety circuit cutoff signal generator 217. Upon receipt of the abnormality result, the safety circuit cutoff signal generation unit 217 outputs a safety circuit cutoff signal to the car control unit 215 of the operation control controller 21.

[Operation controller operation during secondary firefighting]
FIG. 7 is a flowchart showing an operation example of the operation controller 21 (the car control unit 215) during the secondary fire fighting operation according to the embodiment of the present invention. The CPU 81 included in the operation control controller 21 executes the program recorded in the ROM 82 or the like, whereby the processing shown in FIG. 6 is executed.

First, the car control unit 215 of the operation control controller 21 determines whether or not the door opening travel abnormality determination of the electronic safety controller 22 is invalid, that is, whether or not the door opening traveling abnormality signal is received from the electronic safety controller 22. (S31).

Next, when the door open running abnormality determination is invalid (YES in S31), the car control unit 215 sends a short circuit signal for the landing door switch 51 and a short circuit signal for the car door switch 61 from the door switch short circuit signal generation unit 214. Is determined (S32).

Next, when the short circuit signals of the landing door switch 51 and the car door switch 61 are received (YES in S32), the car control unit 215 permits the operation of the elevator 1 (S33). Then, the car control unit 215 controls the drive signal supplied from the motor drive circuit 15 to the motor 14 according to the instructions of the operator, and performs the secondary fire fighting operation.

Then, the car control unit 215 does not invalidate the door opening running abnormality determination (NO in S31), does not receive the short circuit signal of the landing door switch 51 and the car door switch 61 (NO in S32), or step S33. When the process is finished, the process of this flowchart is finished.

[Effect of this embodiment]
According to the present embodiment configured as described above, the signals of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 are taken into the electronic safety controller 22 composed of a computer, and each fire fighting operation switch is turned on. It is determined whether or not. When the primary fire-fighting operation switch 71 and the secondary fire-fighting operation switch 52 are turned on, the door-opening travel protection device 225 invalidates the door-opening travel abnormality determination and permits the operation, thereby allowing the secondary fire-fighting operation. Realize driving.

Therefore, in this embodiment, in the elevator 1 provided with the electronic safety controller 22 having a door opening travel protection function (UCMP) constituted by a microcomputer, the secondary fire fighting using the electronic safety controller 22 and considering safety. An electronic safety system that can be operated can be constructed. In the present embodiment, since the secondary fire-fighting operation can be controlled by software using the electronic safety controller 22, it is possible to save space rather than assembling a control circuit related to the secondary fire-fighting operation by hardware. It is possible.

Furthermore, according to the present embodiment, the signals of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 are taken into the operation controller 21 and the landing door switch 51 and the car door switch 61 are short-circuited in software. Thus, the operation is permitted when the door open travel abnormality determination of the door open travel protection device 225 is invalid and the landing door switch 51 and the car door switch 61 are short-circuited. Therefore, the secondary fire-fighting operation with higher reliability can be realized.

In FIG. 7, the door opening travel abnormality determination of the door opening travel protection device 225 is invalid and the landing door switch 51 and the car door switch 61 are short-circuited. However, the present invention is not limited to this example. If at least the door-opening travel abnormality determination of the door-open travel protection device 225 is invalid, the secondary fire-fighting operation of the elevator 1 may be permitted. By doing in this way, even if the landing door 50 and the car door 60 are open (the signals of the landing door switch 51 and the car door switch 61 are not in the ON state), it is possible to deal with an elevator that operates. Is possible.

In the present embodiment, the operation controller 21 takes in the signals of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 and generates a short circuit signal indicating that the landing door switch 51 and the car door switch 61 are turned on. The traveling of the car 10 is stopped based on the short circuit signal. Thereby, even if each door does not close due to a failure of the door of the car 10, or the landing door switch 51 or the car door switch 61, it can be considered that each door is closed and the operation can be performed.

Further, in the present embodiment, the operation controller 21 receives each signal indicating the state of the primary fire fighting operation switch 71 and the secondary fire fighting operation switch 72 received from the electronic safety controller 22, and the primary fire fighting directly taken into its own controller. The signals representing the states of the operation switch 71 and the secondary fire fighting operation switch 72 are compared. Then, the operation controller 21 performs control to stop the traveling of the car when the contents of the signals do not match. Thereby, the safety | security of control of the secondary fire fighting operation by the software which concerns on this embodiment can be improved.

It should be noted that the present invention is not limited to the above-described embodiments, and various other application examples and modifications can be taken without departing from the gist of the present invention described in the claims. .

For example, the above-described exemplary embodiments are detailed and specific descriptions of the configuration of the apparatus and the system in order to explain the present invention in an easy-to-understand manner, and are not necessarily limited to those having all the configurations described above. . Further, it is possible to replace a part of the configuration of one embodiment with the configuration of another embodiment. In addition, the configuration of another embodiment can be added to the configuration of a certain embodiment. Moreover, it is also possible to add, delete, and replace other configurations for a part of the configuration of each exemplary embodiment.

In addition, each of the above-described configurations, functions, processing units, processing means, and the like may be realized by hardware by designing a part of them, for example, by an integrated circuit.

Also, the control lines and information lines indicate what is considered necessary for the explanation, and not all the control lines and information lines on the product are necessarily shown. Actually, it may be considered that almost all the components are connected to each other.

Further, in this specification, the processing steps describing time-series processing are not limited to processing performed in time series according to the described order, but are not necessarily performed in time series, either in parallel or individually. The processing (for example, parallel processing or object processing) is also included.

10 ... car, 21 ... operation controller, 22 ... safety controller, 30 ... encoder, 40a, 40b ... detection plate, 41 ... car position sensor, 50A, 50B ... landing door, 51a, 51b ... landing door switch, 60 ... car door, 61 ... car door switch, 71 ... primary fire fighting operation switch, 72 ... secondary fire fighting operation switch, 80 ... computer, 81 ... CPU, 211e-211h ... input interface, 212e-212h ... RAM (primary RAM ), 213e to 213h ... RAM (secondary RAM), 214 ... door switch short circuit signal generation unit, 215 ... car control unit, 221a to 221d ... input interface, 222a to 222d ... RAM (primary RAM), 223a to 223d ... RAM Secondary RAM), 224 ... ucmP disable signal generation unit, 225 ... ucmP (door-open running protection device)

Claims

A signal generator that generates a signal in conjunction with a car in the hoistway;
A car position sensor provided on the car for detecting a detection member installed corresponding to a floor in the hoistway;
A landing door switch for detecting the opening / closing state of the landing door;
A car door switch for detecting the opening / closing state of the car door,
A primary fire fighting operation switch for performing a primary fire fighting operation installed in the car;
A secondary fire-fighting operation switch for performing a secondary fire-fighting operation when the primary fire-fighting operation switch is not shifted to the primary fire-fighting operation after the operation;
The door opening that stops the operation of the car by determining the door opening running abnormality from the output signal of the signal generator, the output signal of the car position sensor, the signal of the landing door switch, and the signal of the car door switch. An electronic safety controller with a travel protection function;
An operation control controller for stopping the operation of the car when the electronic safety controller determines that the door opening traveling abnormality is present, and
The electronic safety controller captures the signals of the primary fire fighting operation switch and the secondary fire fighting operation switch, and determines that the primary fire fighting operation switch and the secondary fire fighting operation switch are turned on, the door opening running Elevator to disable the judgment of abnormality.
The operation control controller takes in the signals of the primary fire fighting operation switch and the secondary fire fighting operation switch, and determines that the primary fire fighting operation switch and the secondary fire fighting operation switch are turned on, the landing door switch The elevator according to claim 1, wherein a short circuit signal indicating that the car door switch is turned on is generated, and the operation of the car is stopped based on the short circuit signal.
The electronic safety controller converts the captured signals of the primary fire fighting operation switch and the secondary fire fighting operation switch into signals representing the states of the primary fire fighting operation switch and the secondary fire fighting operation switch, respectively. Output to the operation controller,
The operation control controller takes in the signals of the primary fire fighting operation switch and the secondary fire fighting operation switch and converts them into signals representing the states of the primary fire fighting operation switch and the secondary fire fighting operation switch, respectively. Respective signals representing the states of the primary fire fighting operation switch and the secondary fire fighting operation switch received from the electronic safety controller, and the states representing the states of the primary fire fighting operation switch and the secondary fire fighting operation switch converted by the own controller. The elevator according to claim 2, wherein signals are compared, and if the contents of the signals do not match, control for stopping the operation of the car is performed.
A signal generating device that generates a signal in conjunction with a car in the hoistway, and a car position sensor that is provided in the car and detects a detection member installed corresponding to the floor in the hoistway; A landing door switch for detecting the open / closed state of the landing door, a car door switch for detecting the open / closed state of the car door, and a primary fire fighting operation switch for performing a primary fire fighting operation installed in the car; In an elevator control device for controlling the operation of an elevator comprising a secondary fire-fighting operation switch for performing a secondary fire-fighting operation when the primary fire-fighting operation switch is not shifted to after the operation of the primary fire-fighting operation switch,
The door opening that stops the operation of the car by determining the door opening running abnormality from the output signal of the signal generator, the output signal of the car position sensor, the signal of the landing door switch, and the signal of the car door switch. An electronic safety controller with a travel protection function;
An operation control controller for stopping the operation of the car when the electronic safety controller determines that the door opening traveling abnormality is present, and
The electronic safety controller captures the signals of the primary fire fighting operation switch and the secondary fire fighting operation switch, and determines that the primary fire fighting operation switch and the secondary fire fighting operation switch are turned on, the door opening running Elevator control device that invalidates the judgment of abnormality.
A signal generating device that generates a signal in conjunction with a car in the hoistway, and a car position sensor that is provided in the car and detects a detection member installed corresponding to the floor in the hoistway; A landing door switch for detecting the open / closed state of the landing door, a car door switch for detecting the open / closed state of the car door, and a primary fire fighting operation switch for performing a primary fire fighting operation installed in the car; , A secondary fire fighting operation switch for performing a secondary fire fighting operation when the primary fire fighting operation switch is not shifted to after the operation of the primary fire fighting operation switch, an output signal of the signal generator, and an output signal of the car position sensor An electronic safety controller having a door-opening travel protection function for determining a door-opening travel abnormality from the signal of the landing door switch and the signal of the car door switch and stopping the operation of the car And La, when the electronic safety controller has determined that the running with door open abnormality, the operation controller for stopping the operation of the car, the computer included in the electronic safety controller of elevators including,
A procedure for capturing signals of the primary fire fighting operation switch and the secondary fire fighting operation switch;
A procedure for determining whether or not the primary fire fighting operation switch and the secondary fire fighting operation switch are turned on;
A program for executing a procedure for invalidating the determination of the door opening running abnormality when it is determined that the primary fire fighting operation switch and the secondary fire fighting operation switch are turned on.